Through the McAfee DXL, SAS Cybersecurity delivers continuously updated risk scores for every network-connected asset. The solution derives risk from extensive composite scoring against multiple behavioral measures and the behavior of an asset’s peer group.

“Given seemingly exponential increases in IoT devices, virtual machines and cloud services inside most enterprise networks, security organizations often lack the network knowledge and context necessary to prioritize risks and jump-start investigations,” said Stu Bradley, Vice President of Cybersecurity Solutions at SAS. “This integration not only provides much-needed network behavior context at scale; it also automates the triangulation of risk across end point, identity and threats using DXL data. The result is significant efficiency gains, enhancing detection while eliminating the need for extensive manual data manipulation.”

As an input to risk scoring, SAS Cybersecurity enriches data to enhance behavioral records across data dimensions. Customers with McAfee DXL-compatible solutions can opt to have the composite risk scores, enriched records and underlying contextual data published to their systems. McAfee ePO database customers will receive this information natively via the DXL Task Manager, which operationalizes DXL events into McAfee ePO platform.

“The SAS Cybersecurity-McAfee DXL integration empowers security teams with an analytics-based view of their security risks, enabling them to efficiently prioritize efforts and resources, and accelerate incident investigation,” said DJ Long, head of the McAfee Security Innovation Alliance. “Organizations will benefit from the rich context the solution provides to help them improve their network defenses.”

This integration is a first step in SAS and McAfee’s collaboration to deliver an enhanced, analytically driven approach to security operations that enables customers to move beyond indicators of compromise to predictively identify and address indicators of attack – a challenge the security industry has to date struggled to overcome.